(24/27)
Common Internet File System (CIFS)
Connexion TCP et négociations
192.168.1.1 -> 192.168.1.6 TCP 58296 > microsoft-ds [SYN] ...
192.168.1.6 -> 192.168.1.1 TCP microsoft-ds > 58296 [SYN, ACK]
... 192.168.1.1 -> 192.168.1.6 TCP 58296 > microsoft-ds [ACK] ...
192.168.1.1 -> 192.168.1.6 SMB Negotiate Protocol Request 192.168.1.6 -> 192.168.1.1 TCP microsoft-ds > 58296 [ACK] ...
192.168.1.6 -> 192.168.1.1 SMB Negotiate Protocol Response
192.168.1.1 -> 192.168.1.6 TCP 58296 > microsoft-ds [ACK] ...
192.168.1.1 -> 192.168.1.6 SMB Session Setup AndX Request, User:
\phil 192.168.1.6 -> 192.168.1.1 TCP microsoft-ds > 58296 [ACK] ...
<- authentification OK 192.168.1.6 ->
192.168.1.1 SMB Session Setup AndX Response
192.168.1.1 -> 192.168.1.6 SMB Tree Connect AndX Request, Path:
\\192.168.1.6\IPC$ 192.168.1.6 -> 192.168.1.1 SMB Tree Connect AndX Response 192.168.1.1 -> 192.168.1.6 SMB NT Create AndX Request, Path:
\lsarpc 192.168.1.6 -> 192.168.1.1 SMB NT Create AndX Response, FID:
0x76b2
Vous êtes ici :